CVE-2022-28781

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller...

CVE-2022-20089

In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397...

Input validation

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller...

CVE-2022-28781

The CVE-2022-28781 entry describes an improper input validation in Settings prior to Samsung SMR May 2022 Release 1, enabling attackers to launch arbitrary activities with system privileges. Connected sources confirm this CVE pertains to Samsung Mobile/SMR updates and note the patch adds proper c...

CVE-2022-28781

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller...

CVE-2022-27838

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

Privilege escalation

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

CVE-2022-27838

Summary: CVE-2022-27838 is an improper access control vulnerability in Samsung FactoryCamera prior to version 2.1.96. An attacker could access a file with system privileges due to insufficient access controls. Affected software: FactoryCamera, versions before 2.1.96. Impact: Access to restricted ...

CVE-2022-27838

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...

CVE-2022-27837

CVE-2022-27837 involves a vulnerability in Android’s Accessibility framework through the use of PendingIntent. The issue, described across multiple sources, is triggered in Android R (11.0) prior to 12.5.3.2 and Android S (12.0) prior to 13.0.1.1, where an attacker could access files with system ...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

CVE-2021-39725

In gasketfreecoherentmemoryall of gasketpagetable.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

Mozilla VPN local privilege escalation vis uncontrolled OpenSSL search path — Mozilla

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege...

CVE-2022-23426

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege...

CVE-2022-23426

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege...

VulnCheck KEV: CVE-2021-36934

If a Volume Shadow Copy VSS shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level...

Input validation

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

CVE-2022-21933

CVE-2022-21933 affects ASUS VivoMini/Mini PC and describes an improper input validation vulnerability. A local attacker with system privileges can trigger a System Management Interrupt (SMI) to modify memory, resulting in arbitrary code execution and potential control or disruption of the system....

PT-2022-15190 · Asus · Asus Vivomini/Mini Pc

Name of the Vulnerable Software and Affected Versions: ASUS VivoMini/Mini PC affected versions not specified Description: The issue is related to an improper input validation vulnerability. A local attacker with system privilege can exploit this by using system management interrupt SMI to modify...